exploit-mitigation

Complete System Hardening Suite 2026 🛡️ Advanced Antivirus & Network Security

SELinux, IdM, and AAP proof of concept for confining privileged automation and denying kernel exploit surfaces before jobs reach managed RHEL hosts.

Open untrusted documents in a sandbox. PDFs, images, Office files — only pixels reach your machine.

Go daemon for Linux that reads audit events from the audisp-af_unix Unix domain socket and automatically deletes or quarantines (moves) files that match a set of configurable rules as soon as they appear

Solução avançada de segurança para Minecraft 1.8.9. Atua na camada Netty interceptando pacotes brutos para mitigar ataques de Bot (DoS), exploits de NBT e Book Crash. Focado em performance e baixo nível, filtra dados antes da main thread para garantir estabilidade e proteção total contra pacotes maliciosos.

Scans ELF binaries for the exploit mitigations they were actually compiled with (PIE, NX, canary, RELRO). JSON output and a --fail-under gate for CI.

ELF hardening scanner in Rust (goblin), parallel directory walk and --strict gate. Third implementation of the same scanner.

Runtime ROP/JOP detector using Intel LBR via perf_event_open

A 2026 cross-platform security suite designed to protect Windows, macOS, iOS, and Android devices. It features multi-layered ransomware defense, a two-way firewall to monitor network traffic, and real-time threat detection. The utility includes a VPN for private browsing and parental controls to manage digital safety for family members.

ELF hardening scanner in Go (debug/elf). Cross-checked against the Python and Rust implementations.

Fluid: a fork per person, intent as version-controlled data, and behavioral regression as the merge criterion. Security: a fleet of forks is a moving target. Each fork can run its own copy in which internal names get a secret suffix, so an exploit that uses those names cannot reach every fork at once. Built on Cloudflare Workers and Artifacts.

divcc: compiler wrapper producing per-device unique binaries via seeded link-order shuffling, so an exploit built on fixed addresses does not carry across a fleet.

Hands-on labs and in-depth guides for Linux kernel security hardening and mitigations

A source-backed encyclopedia of low-level security techniques — public defensive sample (framework + schema + CI + 150 mitigation entries).